Auto-Update: 2025-11-27T17:00:11.878500+00:00

This commit is contained in:
cad-safe-bot committed 2025-11-27 17:04:05 +00:00
1 parent 25540e012b
commit 473e529b80
6 files changed
+174 -18

No files matched your search

@@ -0,0 +1,56 @@
{
"id": "CVE-2025-12419",
"sourceIdentifier": "[email protected]",
"published": "2025-11-27T16:15:46.957",
"lastModified": "2025-11-27T16:15:46.957",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Mattermost versions 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12, 11.0.x <= 11.0.3 fail to properly validate OAuth state tokens during OpenID Connect authentication which allows an authenticated attacker with team creation or admin privileges to take over any user account via manipulation of authentication data during the OAuth completion flow"
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.1,
"impactScore": 6.0
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-303"
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-13757",
"sourceIdentifier": "[email protected]",
"published": "2025-11-27T16:15:47.117",
"lastModified": "2025-11-27T16:15:47.117",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 2025.2.20, through 2025.3.8."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://devolutions.net/security/advisories/DEVO-2025-0018/",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-13758",
"sourceIdentifier": "[email protected]",
"published": "2025-11-27T16:15:47.257",
"lastModified": "2025-11-27T16:15:47.257",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"references": [
{
"url": "https://devolutions.net/security/advisories/DEVO-2025-0018/",
"source": "[email protected]"
}
]
}
@@ -0,0 +1,33 @@
{
"id": "CVE-2025-13765",
"sourceIdentifier": "[email protected]",
"published": "2025-11-27T16:15:47.387",
"lastModified": "2025-11-27T16:15:47.387",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9."
}
],
"metrics": {},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"references": [
{
"url": "https://devolutions.net/security/advisories/DEVO-2025-0018/",
"source": "[email protected]"
}
]
}
+8 -11
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-11-27T15:00:11.770050+00:00
2025-11-27T17:00:11.878500+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-11-27T14:15:52.183000+00:00
2025-11-27T16:15:47.387000+00:00
```
### Last Data Feed Release
@@ -33,26 +33,23 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
319532
319536
```
### CVEs added in the last Commit
Recently added CVEs: `4`
- [CVE-2025-12140](CVE-2025/CVE-2025-121xx/CVE-2025-12140.json) (`2025-11-27T14:15:50.813`)
- [CVE-2025-12971](CVE-2025/CVE-2025-129xx/CVE-2025-12971.json) (`2025-11-27T13:15:58.547`)
- [CVE-2025-13692](CVE-2025/CVE-2025-136xx/CVE-2025-13692.json) (`2025-11-27T14:15:51.853`)
- [CVE-2025-8890](CVE-2025/CVE-2025-88xx/CVE-2025-8890.json) (`2025-11-27T14:15:52.183`)
- [CVE-2025-12419](CVE-2025/CVE-2025-124xx/CVE-2025-12419.json) (`2025-11-27T16:15:46.957`)
- [CVE-2025-13757](CVE-2025/CVE-2025-137xx/CVE-2025-13757.json) (`2025-11-27T16:15:47.117`)
- [CVE-2025-13758](CVE-2025/CVE-2025-137xx/CVE-2025-13758.json) (`2025-11-27T16:15:47.257`)
- [CVE-2025-13765](CVE-2025/CVE-2025-137xx/CVE-2025-13765.json) (`2025-11-27T16:15:47.387`)
### CVEs modified in the last Commit
Recently modified CVEs: `3`
Recently modified CVEs: `0`
- [CVE-2025-54057](CVE-2025/CVE-2025-540xx/CVE-2025-54057.json) (`2025-11-27T13:15:59.573`)
- [CVE-2025-59302](CVE-2025/CVE-2025-593xx/CVE-2025-59302.json) (`2025-11-27T13:15:59.690`)
- [CVE-2025-59454](CVE-2025/CVE-2025-594xx/CVE-2025-59454.json) (`2025-11-27T13:15:59.810`)
## Download and Usage
+11 -7
View File
@@ -287511,7 +287511,7 @@ CVE-2025-12137,0,0,679ba3ba446ea073a83ea37ad409f9105067749f9129607803c8fd825c740
CVE-2025-12138,0,0,84303c3a186afa964045a57fd0e4a4979cf17ee844a571e7207d9869356c79b0,2025-11-21T15:13:13.800000
CVE-2025-12139,0,0,e63f0884149ad42d0872828f90ca0056e111fbe786c9a025eb19d6a900295310,2025-11-06T19:45:30.990000
CVE-2025-1214,0,0,83319e6848e0d35529b73705b5faa8457da95445a9a7e676376a76f2db06307e,2025-10-17T15:18:02.913000
CVE-2025-12140,1,1,0a2fb1f09fe84a39d81f16bf2b2e9e1ecd7b1ce7bd00b1af8319fbbc65373c1c,2025-11-27T14:15:50.813000
CVE-2025-12140,0,0,0a2fb1f09fe84a39d81f16bf2b2e9e1ecd7b1ce7bd00b1af8319fbbc65373c1c,2025-11-27T14:15:50.813000
CVE-2025-12142,0,0,5113c9770bd129f3f313d8af57f92292eeec384f8666192aef43b4c53dfdf175,2025-10-30T15:03:13.440000
CVE-2025-12147,0,0,4b650092d3b6e630c6eef4a3fd04a61cce7d21291bb149508189d09ae5b41543,2025-10-30T15:03:13.440000
CVE-2025-12148,0,0,15664fc1e11bd7cc7e754e848b7c78051d528efd7fb6991d874f53d675e75574,2025-10-30T15:03:13.440000
@@ -287755,6 +287755,7 @@ CVE-2025-12414,0,0,8dabb6354a884c1b0b603a9f195da7b4cd96d3b73b3b45f7ee435e57ee17b
CVE-2025-12415,0,0,81c866442fb9fd46706f21c98259794a7fcc8b091f645ddfb160f6da0ea0b137,2025-11-04T15:40:45.533000
CVE-2025-12416,0,0,ec35b538eb8dc521ad393c983756c4acf2a7d587acce4aede1c3f6348a585ec8,2025-11-04T15:40:45.533000
CVE-2025-12418,0,0,a1a3e7ea14eefbd5d5678a02f92ecd8b22ddabc6222cd4b305997e821ca32c95,2025-11-12T16:20:22.257000
CVE-2025-12419,1,1,a2ede39b47f1f34e8ae24a605c4fd0885b5662661338e02ddc65a641e8e0a752,2025-11-27T16:15:46.957000
CVE-2025-12422,0,0,c197f0fdb3e6b11f38ef90be4db88b71f39618450fda8bfc8f97063dbbe72561,2025-11-07T14:55:47.233000
CVE-2025-12423,0,0,04a15ea262d7c2854c3c856f4a7f1a5f874bc79c8e1c595fa69c870dc5f849ac,2025-11-07T14:52:25.637000
CVE-2025-12424,0,0,613cb5b6f521f743a1b8f2c197dbda50cc1c23974cf9bce65db85ece67adf490,2025-11-07T14:45:20.907000
@@ -288133,7 +288134,7 @@ CVE-2025-12967,0,0,53844bd713faed9f25007c3541f7ed82f95cfc3005761d3d1526b0d234a74
CVE-2025-12969,0,0,4a7f8b6ba5948eda75b3d5730830a4822be24400d673245b2e60812d5f182ab2,2025-11-25T22:16:16.690000
CVE-2025-1297,0,0,78515bdaa2af0e7a9c64065f59df89a4063ec0cd41bf5cb9d6ac47f9b8659894,2025-07-05T23:15:24.687000
CVE-2025-12970,0,0,956baa410284f639f80bb23e9e790429daf283811548c590c30beaca0f2b3bfe,2025-11-25T22:16:16.690000
CVE-2025-12971,1,1,fbe684c63a020605a86e5fed0f47105a5579a7406d08c7e8dfd4e20bdf3cc07f,2025-11-27T13:15:58.547000
CVE-2025-12971,0,0,fbe684c63a020605a86e5fed0f47105a5579a7406d08c7e8dfd4e20bdf3cc07f,2025-11-27T13:15:58.547000
CVE-2025-12972,0,0,bf5ab07560a8edd8ee64f52a226cfe501f4d8cf1cec30ef374adae58980b5be9,2025-11-25T22:16:16.690000
CVE-2025-12973,0,0,20a71454e41ae0fe7c7a57947f587760c66aeedb1cfaa57638ffd5490540abbb,2025-11-25T22:16:42.557000
CVE-2025-12974,0,0,e9fdeadb0dc5dbbe42bcb04a548c1d41728fcfdbc867e1d08257582f92ff5c35,2025-11-18T14:06:29.817000
@@ -288532,7 +288533,7 @@ CVE-2025-13675,0,0,97b4fdc386f4ee4979c7c0568ff68d22f9fa23bb53787d6da4949240f0f43
CVE-2025-1368,0,0,47271c6ae43804dd7cb5b927f858cf116bc6b6b4ed41b123e09335b3d17d94d6,2025-06-27T17:45:48.730000
CVE-2025-13680,0,0,0e8040826ee428154cef58801a8e5665ba50117efda5ec780105525888f9980c,2025-11-27T05:16:15.253000
CVE-2025-1369,0,0,22a8e7c39c9b40c279ced62c189601215b55a9153a1a00c08375d438f7e2ed3b,2025-06-27T17:45:37.233000
CVE-2025-13692,1,1,89499e66afdf0e54c55c084cccf13575ca65ee8d7fa8378721ed8d272c460a0c,2025-11-27T14:15:51.853000
CVE-2025-13692,0,0,89499e66afdf0e54c55c084cccf13575ca65ee8d7fa8378721ed8d272c460a0c,2025-11-27T14:15:51.853000
CVE-2025-1370,0,0,6c02702042de3c3f09f6c7855cb184e94c3fe67ff949753c809091df370d2817,2025-06-27T17:45:14.213000
CVE-2025-1371,0,0,b0b7a9879ee015862f2a61f044d93f38b089289c09729ba7f8126646ae3c35b8,2025-11-04T20:13:36.377000
CVE-2025-1372,0,0,676de41a5e96918edd1e9abe19591cdfd537de8ef7e5337fa81158da24759d8f,2025-11-04T20:19:09.520000
@@ -288540,8 +288541,11 @@ CVE-2025-1373,0,0,77cfaa3a6771902b072de962115d7552a47b140ae8333a2256741e5279e5fe
CVE-2025-13735,0,0,6d7e37a24d3df88ec0d495428e2fb27d0bdf736c32751af3c3f72f561d67e861,2025-11-26T07:16:00.173000
CVE-2025-1374,0,0,c63cfcac4cc7e61dba55405a222ef271dee63812916e3abadacbbeed1056c0bb,2025-10-23T20:06:00.793000
CVE-2025-13742,0,0,f66b6c8bb17e0ae04f300afbab7e5871467b6ad126db1ef889f339bb7fa76786,2025-11-27T11:15:47.760000
CVE-2025-13757,1,1,7480802b2f9c1313963fb102739252399b720e5f38e43f218e71a2c8453facff,2025-11-27T16:15:47.117000
CVE-2025-13758,1,1,b748a8cc4d69893a496e35f0381ae6036efc5dd61a73fddac153cd83012816cc,2025-11-27T16:15:47.257000
CVE-2025-1376,0,0,de4237f06ae76bb371bb37755604dd21a28e325c264f69c8440e79b38d9646a3,2025-11-04T20:21:18.260000
CVE-2025-13762,0,0,2e71af04cb5680693defe086dc31cc2e5bffb1dabe6d051f6559290504bf5c6b,2025-11-27T03:15:58.613000
CVE-2025-13765,1,1,70a79c3df44b1d2bd17ed45daaa3c71e0fd532a568b67e455d024ef7b4aa662a,2025-11-27T16:15:47.387000
CVE-2025-1377,0,0,cdf3c00849797fee9786ea08188d37668b21a456809fa64aaace8c05203cfaf9,2025-11-04T20:26:20.043000
CVE-2025-1378,0,0,7b0b1440e8634b58b74747d3b86a48aac3845e3d771526460c32a15ff40576ad,2025-06-23T14:37:28.747000
CVE-2025-1379,0,0,5dcb3165f40d5545ed4ce19a6009cd3b7b7246346d15ef8a292528f915f8199d,2025-04-02T18:44:42.610000
@@ -310399,7 +310403,7 @@ CVE-2025-54053,0,0,e9e9459393609e57214e24c621c9cdd1763f894b6c4ba2fad91f796a7fd99
CVE-2025-54054,0,0,4dc38e397668595d8f02e8d92126e0bba8dc9783e9ef84ce397f6b1a3bfac661,2025-08-15T13:12:51.217000
CVE-2025-54055,0,0,47384fbb326a4a0000a75f3776efb052f4e07d4a72d80c10f2b26b455b745b95,2025-08-20T14:39:07.860000
CVE-2025-54056,0,0,ab5ae4acbb7d3cbab42b0598214f8fbdfd6a34b1f29cb0e3f3c6cd69a05eafc8,2025-08-20T14:39:07.860000
CVE-2025-54057,0,1,f00940c6664aaf64b6024ede357ccb33d0bb6923ffcefc136f96a810b0baf236,2025-11-27T13:15:59.573000
CVE-2025-54057,0,0,f00940c6664aaf64b6024ede357ccb33d0bb6923ffcefc136f96a810b0baf236,2025-11-27T13:15:59.573000
CVE-2025-54058,0,0,54551bc905d08b35a9b59ff13f5d0f99cd06faa4c1f52db375d128cc426401f4,2025-07-30T19:57:36.920000
CVE-2025-54059,0,0,e7521325b784a60b8cf1ab44bee4a9338b70e573bec3931de470ea881a7e4eaa,2025-07-22T13:06:27.983000
CVE-2025-5406,0,0,509a344dc50e4611e2c15df30ada69259995c2180af6d40ea08b78d9fd22fed5,2025-11-10T20:43:07.087000
@@ -313483,7 +313487,7 @@ CVE-2025-59298,0,0,94788272069fbd31b1f28802793f10e942b9bda01decb8c058b7d99129063
CVE-2025-59299,0,0,d72e45ee1190d327a5412075b2c0f0560698a5360e1cf3ec41bfe69e3a8e5203,2025-10-08T16:06:48.857000
CVE-2025-5930,0,0,f247db24f36bcbf2f7d81e18a82d068f64b444dc019b1b0b868d92f5ff3fa36b,2025-06-16T12:32:18.840000
CVE-2025-59300,0,0,0400f1c4c0121ce111ce382d24b72cb9ed062365f28720e011fbc5956002a9c1,2025-10-08T16:06:43.490000
CVE-2025-59302,0,1,0a0b47609615dacca00a40d10e377bfdf6661242daea52f295f3c321f8f9c523,2025-11-27T13:15:59.690000
CVE-2025-59302,0,0,0a0b47609615dacca00a40d10e377bfdf6661242daea52f295f3c321f8f9c523,2025-11-27T13:15:59.690000
CVE-2025-59303,0,0,c4f571ee799bfd0d00495f65c0cd3d76bd632da85486e9e2f1d54513c9d59007,2025-10-08T19:38:09.863000
CVE-2025-59304,0,0,5b0bbfa0908c68eecd428d17c33bdc66d5d071f82e38aeb31c0614032b53f47f,2025-10-08T18:28:20.703000
CVE-2025-59305,0,0,8975fac9bd1c797c2b466f3dad6f7a2eb7a3e884b20ab7ca9ed3ea7fec886c3b,2025-10-17T14:54:41.870000
@@ -313596,7 +313600,7 @@ CVE-2025-59450,0,0,cc8ebd543ed94e7e8c5eb25cd3d6fdbecd20dc83117fdc80193207d24a8a2
CVE-2025-59451,0,0,d43d774f0c491762ca8564187b8cb24dd7a065842ecef1c272e93ddafd0aa456,2025-11-26T16:15:49.337000
CVE-2025-59452,0,0,42e78e6996f8529a843cc506a004089441b3daf083ddb16025dc55f88b942416,2025-11-26T16:15:49.480000
CVE-2025-59453,0,0,be127379569315826e0c646734111a3b21a97953ede1374fb4dd967f47d57579,2025-09-16T12:49:16.060000
CVE-2025-59454,0,1,3cc4bc0f4037e5a2b398e0d4894fbb957699fd8d10883c3cb3c65ccbff6d5461,2025-11-27T13:15:59.810000
CVE-2025-59454,0,0,3cc4bc0f4037e5a2b398e0d4894fbb957699fd8d10883c3cb3c65ccbff6d5461,2025-11-27T13:15:59.810000
CVE-2025-59455,0,0,98a392455141fbea7a0ddd0644d54cf404717ff9b60ff622cd1598ecfbf97739,2025-09-22T17:07:40.623000
CVE-2025-59456,0,0,0b8b1978502b22f2df8e7124aa20a513e8961146c9edf6fe977c9e752db7ead7,2025-09-22T17:07:38.200000
CVE-2025-59457,0,0,40d1f76d7248d89408b1a7c186dd57f51f7d2152368b9ac2373a56a3cc7f8575,2025-09-22T17:07:35.593000
@@ -318579,7 +318583,7 @@ CVE-2025-8885,0,0,7aefb83b6185f7e05f288474a3aea67a7055c3ea20ea30b732c62078c4954c
CVE-2025-8886,0,0,0ffd1f9cf896bb3809c6ca87b53a391934b18261428144f6057104aaadfc9551,2025-10-14T19:36:59.730000
CVE-2025-8887,0,0,a73bd93f43bd970aac721062b24276bb4ea35e37922b640155c8b0dbe5b909f0,2025-10-14T19:36:59.730000
CVE-2025-8889,0,0,8a134d86b620e30b6e3655482fef7da101c612b8290173bccea4636575ee62cf,2025-11-13T21:15:54.960000
CVE-2025-8890,1,1,7c4e6a51718383d5696386e219ea5fedb9a848506811779a36cb60300d91b477,2025-11-27T14:15:52.183000
CVE-2025-8890,0,0,7c4e6a51718383d5696386e219ea5fedb9a848506811779a36cb60300d91b477,2025-11-27T14:15:52.183000
CVE-2025-8891,0,0,a565099264de7f5485b2ccf8c8f645c77f0b61f266b88e6c11cf727d392c9117,2025-08-26T16:15:38.430000
CVE-2025-8892,0,0,5433551d97706b7f128c4a7c930fcd622ae463d95a07487f562a77c75a57de94,2025-09-25T18:24:00.030000
CVE-2025-8893,0,0,28531f5c84d7a209e09c6e1873501ffadd1283ff66892366ec6d8ea27436b636,2025-09-19T13:52:47.467000
Can't render this file because it is too large.